Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 02.08.2018
Exécuté par Eric (administrateur) sur Y3TCW (18-08-2018 10:48:02)
Exécuté depuis C:\Users\Eric\Desktop
Profils chargés: Eric (Profils disponibles: Eric & Test & MSSQL$SQLEXPRESS & DefaultAppPool)
Platform: Windows 10 Pro Version 1803 17134.165 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(ESET) C:\Program Files\ESET\ESET Security\egui.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
() C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\DebugDiag\DbgSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
() C:\Program Files (x86)\HDD Health\HDDHealthService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(NoVirusThanks Company Srl) C:\Program Files\NoVirusThanks\OSArmorDevSvc\OSArmorDevSvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
() C:\Program Files (x86)\Synology\CloudStationBackup\bin\vss-service-x64.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1807.18075-0\MsMpEng.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.19\AsusFanControlService.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Copyright 2017.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(NoVirusThanks Company Srl) C:\Program Files\NoVirusThanks\OSArmorDevSvc\OSArmorDevUI.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(PANTERASoft) C:\Program Files (x86)\HDD Health\hddhealth.exe
(Synology Inc.) C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\cloud-backup-ui.exe
(Synology Inc.) C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\cloud-backup-connect.exe
(Synology Inc.) C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\cloud-backup-daemon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1807.18075-0\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(BiniSoft.org) C:\Program Files\Windows Firewall Control\wfcs.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8842496 2016-07-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1454336 2016-07-10] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [Cmaudio8788] => C:\WINDOWS\syswow64\RunDll32.exe C:\WINDOWS\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] => C:\WINDOWS\syswow64\HsMgr.exe [200704 2016-07-15] ()
HKLM\...\Run: [Cmaudio8788GX64] => C:\WINDOWS\system\HsMgr64.exe [282112 2016-07-15] ()
HKLM\...\Run: [Windows Firewall Control] => C:\Program Files\Windows Firewall Control\wfc.exe [611840 2018-03-04] (BiniSoft.org)
HKLM\...\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [104128 2016-09-15] (VMware, Inc.)
HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [515600 2017-04-10] (QFX Software Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3191728 2017-06-09] (Dominik Reichl)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoAutorun] 1
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\Run: [f.lux] => C:\Users\Eric\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2017-06-13] (Piriform Ltd)
HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Eric\AppData\Local\Akamai\netsession_win.exe [4586456 2018-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\Policies\Explorer: [NoAutorun] 1
HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Ribbons.scr [148480 2018-04-12] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HDDHealth.lnk [2014-04-23]
ShortcutTarget: HDDHealth.lnk -> C:\Program Files (x86)\HDD Health\hddhealth.exe (PANTERASoft)
Startup: C:\Users\Eric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Synology Cloud Station Backup.lnk [2018-08-18]
ShortcutTarget: Synology Cloud Station Backup.lnk -> C:\Program Files (x86)\Synology\CloudStationBackup\bin\launcher.exe (Synology Inc.)
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\..\Interfaces\{1ac9eb5e-02e0-47e8-ad1e-2a539d03e417}: [DhcpNameServer] 192.168.13.1
Tcpip\..\Interfaces\{1e8f09f3-f435-4bb1-8583-09e23094d627}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{21e18cd4-b4af-4837-800e-0ede2c528f81}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{59bb549f-bb49-42a1-8019-d0a90af35b8c}: [DhcpNameServer] 192.168.111.2
Tcpip\..\Interfaces\{c78bf1c8-6a0c-4a2b-951c-21b0063c9de3}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{e3cae538-ebcf-4499-a925-a2bde57cf320}: [NameServer] 141.1.1.1,141.1.27.249
Tcpip\..\Interfaces\{f1ecbc54-db16-429d-8b35-5da45b689a3c}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2017-05-22] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-02] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-02] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-06-28] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-28] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)

FireFox:
========
FF DefaultProfile: s9on8h7r.default
FF ProfilePath: C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default [2018-08-18]
FF Extension: (Firebug) - C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default\Extensions\[removed] [2017-07-07] [Legacy]
FF Extension: (JavaScript Deobfuscator) - C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default\Extensions\[removed] [2016-10-17] [Legacy]
FF Extension: (RefControl) - C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default\Extensions\{455D905A-D37C-4643-A9E2-F6FEFAA0424A}.xpi [2017-07-07] [Legacy]
FF Extension: (Pas de nom) - C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2018-05-08] [non signé]
FF Extension: (En-têtes HTTP en direct) - C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a} [2017-07-07] [Legacy]
FF Extension: (Tamper Data) - C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi [2016-10-18] [Legacy]
FF Extension: (Cookies Manager+) - C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2017-09-24] [Legacy]
FF Extension: (Web Developer) - C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\s9on8h7r.default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2017-12-15]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-11-29] [Legacy] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2016-12-20] [Legacy] [non signé]
FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-02] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-28] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2608685514-3513478324-1993146139-1001: @my.com/Games -> C:\Users\Eric\AppData\Local\MyComGames\NPMyComDetector.dll [2017-04-30] (MY.COM B.V.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR DefaultSearchKeyword: Default -> lp
CHR Profile: C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default [2018-08-18]
CHR Extension: (Docs) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-22]
CHR Extension: (Ledger Manager) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\beimhnaefocolcplfimocfiaiefpkgbf [2018-08-03]
CHR Extension: (YouTube) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-22]
CHR Extension: (Modify Header Value (HTTP Headers)) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbdibdfhahmknbkkojljfncpnhmacdek [2018-05-29]
CHR Extension: (uBlock Origin) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-08-17]
CHR Extension: (Adobe Acrobat) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-07-22]
CHR Extension: (Sheets) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (EditThisCookie) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2018-05-13]
CHR Extension: (HTTPS partout) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2018-06-22]
CHR Extension: (Google Docs hors connexion) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-22]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2018-08-11]
CHR Extension: (Mailvelope) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajibbejlbohfaggdiogboambcijhkke [2018-05-24]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-22]
CHR Extension: (Chrome Media Router) - C:\Users\Eric\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-08-03]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-09-12]

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AppMgmt; C:\WINDOWS\SysWOW64\appmgmts.dll [164864 2018-04-12] () [Fichier non signé]
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-01-28] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-11] () [Fichier non signé]
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.19\AsusFanControlService.exe [396088 2016-07-10] (ASUSTeK Computer Inc.)
R2 Cloud Station Backup VSS Service x64; C:\Program Files (x86)\Synology\CloudStationBackup\bin\vss-service-x64.exe [287256 2017-08-23] ()
R2 DbgSvc; C:\Program Files\DebugDiag\DbgSvc.exe [409016 2015-09-02] (Microsoft Corporation)
S4 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3883544 2016-12-22] (devolo AG)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2289856 2017-07-03] (Disc Soft Ltd)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [249328 2016-07-10] (DTS, Inc)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2625368 2017-06-13] (ESET)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2016-12-20] (Seiko Epson Corporation)
S3 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [777728 2014-10-30] (FileZilla Project) [Fichier non signé]
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [143872 2015-09-02] (Microsoft Corporation) [Fichier non signé]
R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1194512 2018-06-06] (Garmin Ltd. or its subsidiaries)
R2 HDDHealth; C:\Program Files (x86)\HDD Health\HDDHealthService.exe [17760 2013-03-08] () [Fichier non signé]
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [136512 2018-08-02] (SurfRight B.V.)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [4645512 2018-08-02] (SurfRight B.V.)
S4 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Fichier non signé]
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
S3 icssvc; C:\WINDOWS\System32\tetheringservice.dll [241152 2018-04-12] () [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
S3 ksu; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Software Updater\kl_platf.exe [1565000 2016-11-26] (AO Kaspersky Lab)
S3 lmhosts; C:\WINDOWS\System32\lmhsvc.dll [26112 2018-04-12] ()
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [3894760 2017-10-19] (Paramount Software UK Ltd)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S4 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [194240 2016-11-10] (Microsoft Corporation)
S3 MySQL; C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe [12907520 2013-02-01] () [Fichier non signé]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [38200 2015-08-26] (The OpenVPN Project)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2202432 2018-06-19] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3072840 2018-06-19] (Electronic Arts)
R2 OSArmorDevSvc; C:\Program Files\NoVirusThanks\OSArmorDevSvc\OSArmorDevSvc.exe [3737832 2018-06-20] (NoVirusThanks Company Srl)
S3 p2psvc; C:\WINDOWS\system32\p2psvc.dll [424960 2018-04-12] () [Fichier non signé]
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [487960 2015-01-31] (Sony Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-05] ()
S3 PolicyAgent; C:\WINDOWS\System32\ipsecsvc.dll [441856 2018-04-12] ()
S3 PrintWorkflowUserSvc; C:\WINDOWS\System32\PrintWorkflowService.dll [170496 2018-04-12] () [Fichier non signé]
S3 QFXUpdateService; C:\Program Files (x86)\KeyScrambler\x64\QFXUpdateService.exe [86544 2017-04-10] ()
S4 RemoteAccess; C:\WINDOWS\SysWOW64\mprdim.dll [407552 2018-04-12] () [Fichier non signé]
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-04-12] (Microsoft Corporation)
R2 SNMP; C:\WINDOWS\System32\snmp.exe [52736 2018-04-12] (Microsoft Corporation)
R2 SNMP; C:\WINDOWS\SysWOW64\snmp.exe [46592 2018-04-12] (Microsoft Corporation)
S2 SolarWinds TFTP Server; C:\Program Files (x86)\SolarWinds\TFTP Server\SolarWinds TFTP Server.exe [60928 2016-01-07] (SolarWinds) [Fichier non signé]
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613056 2016-11-10] (Microsoft Corporation)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [122368 2015-09-02] (Microsoft Corporation) [Fichier non signé]
S2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12462784 2016-09-15] ()
S2 VoodooShieldService; C:\Program Files\VoodooShield\VoodooShieldService.exe [131920 2018-04-11] (VoodooSoft, LLC )
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-09-02] (Microsoft Corporation)
S3 wampapache; c:\wamp\bin\apache\apache2.2.22\bin\httpd.exe [18432 2016-09-26] (Apache Software Foundation) [Fichier non signé]
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe [8177664 2016-09-26] () [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\NisSrv.exe [3905952 2018-07-31] (Microsoft Corporation)
R2 wfcs; C:\Program Files\Windows Firewall Control\wfcs.exe [108032 2018-03-04] (BiniSoft.org) [Fichier non signé]
S3 WiaRpc; C:\WINDOWS\System32\wiarpc.dll [81920 2018-04-12] () [Fichier non signé]
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MsMpEng.exe [110944 2018-07-31] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [15775888 2017-08-09] (Copyright 2017.)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 175562E0; C:\WINDOWS\system32\drivers\175562E0.sys [255928 2018-08-02] (Malwarebytes)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2016-12-26] ()
S3 ampa; C:\WINDOWS\SysWOW64\ampa.sys [38320 2016-12-26] ()
S3 AppvStrm; C:\WINDOWS\system32\drivers\AppvStrm.sys [127384 2018-04-12] () [Fichier non signé]
S3 AppvVfs; C:\WINDOWS\system32\drivers\AppvVfs.sys [143768 2018-04-12] () [Fichier non signé]
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()
S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2016-07-10] (MCCI Corporation)
R1 Capsax64Drv; C:\WINDOWS\System32\Drivers\Capsax64Drv.sys [35976 2016-02-17] (Colasoft Co., Ltd.)
R1 cbdisk3; C:\WINDOWS\system32\drivers\cbdisk3.sys [223936 2013-10-18] (EldoS Corporation)
R3 cmudaxp; C:\WINDOWS\system32\drivers\cmudaxp.sys [2735616 2016-07-15] (C-Media Inc)
S3 CV2K1; C:\WINDOWS\system32\DRIVERS\cv2k1.sys [21608 2015-08-26] (TamoSoft)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-07-10] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-07-10] (Disc Soft Ltd)
S3 e1dexpress; C:\WINDOWS\system32\DRIVERS\e1d62x64.sys [511952 2016-07-10] (Intel Corporation)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [132824 2017-06-22] (ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [14880 2017-05-04] (ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [178056 2017-05-04] (ESET)
R1 epfwwfpr; C:\WINDOWS\system32\DRIVERS\epfwwfpr.sys [77224 2017-05-04] (ESET)
R1 epp; L:\Systèmes\Emsisoft Emergency Kit\bin64\epp.sys [142952 2018-07-19] (Emsisoft Ltd)
R1 gostcrypt; C:\WINDOWS\System32\drivers\gostcrypt.sys [142168 2017-09-22] (GostCrypt Developers)
R1 hmpalert; C:\WINDOWS\system32\drivers\hmpalert.sys [303984 2018-08-02] (SurfRight B.V.)
R3 hmpnet; C:\WINDOWS\system32\drivers\hmpnet.sys [93800 2018-08-02] (SurfRight B.V.)
R1 intnet; C:\WINDOWS\system32\drivers\intnet.sys [45736 2017-03-05] (Promosoft Software Limited)
R4 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [24824 2016-07-10] (ASUSTeK Computer Inc.)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [61688 2016-12-23] (COMODO)
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [39904 2017-06-06] (IObit.com)
S3 IURegProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegProcessFilter.sys [39792 2017-09-28] (IObit.com)
R3 KeyScrambler; C:\WINDOWS\System32\drivers\keyscrambler.sys [233248 2017-02-19] (QFX Software Corporation)
S3 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [192952 2018-08-02] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-08-18] (Malwarebytes)
S3 NdisImPlatform; C:\WINDOWS\System32\drivers\NdisImPlatform.sys [128512 2018-04-12] () [Fichier non signé]
S3 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [81192 2017-06-13] (Insecure.Com LLC.)
R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 NPF_devolo; C:\WINDOWS\sysWOW64\drivers\npf_devolo.sys [36496 2016-12-22] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_2e7fa54192fe16d0\nvlddmkm.sys [16936048 2017-11-09] (NVIDIA Corporation)
U5 osadevprotect; C:\WINDOWS\system32\drivers\osadevprotect.sys [25440 2018-08-18] (NoVirusThanks Company Srl)
U5 OSArmorDevDrv; C:\WINDOWS\system32\drivers\OSArmorDevDrv.sys [26512 2018-08-18] (NoVirusThanks Company Srl)
R3 pikbd; C:\WINDOWS\System32\drivers\pikbd.sys [26088 2016-07-09] (Christian Gulden)
R3 pimou; C:\WINDOWS\System32\drivers\pimou.sys [24600 2016-07-14] (Christian Gulden)
S4 RsFx0201; C:\WINDOWS\System32\DRIVERS\RsFx0201.sys [337088 2014-05-15] () [Fichier non signé]
S3 rspSanity; C:\WINDOWS\System32\DRIVERS\rspSanity64.sys [31328 2012-10-30] (Resplendence Software Projects Sp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [937728 2016-07-14] (Realtek )
R3 Serial; C:\WINDOWS\system32\DRIVERS\nuvserial.sys [86016 2016-07-10] (Nuvoton Technology Corp.)
S3 torguardtap0901; C:\WINDOWS\System32\drivers\torguardtap0901.sys [27136 2016-08-29] (The OpenVPN Project)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2018-08-03] ()
S3 UrsCx01000; C:\WINDOWS\System32\drivers\urscx01000.sys [67992 2018-04-12] () [Fichier non signé]
R3 usbhub; C:\Windows\SysWOW64\drivers\usbhub.sys [27184 1998-08-21] (Microsoft Corporation) [Fichier non signé]
R3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [196040 2017-10-16] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206976 2017-10-16] (Oracle Corporation)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [631200 2017-09-28] (IDRIX)
S3 visctap0901; C:\WINDOWS\System32\drivers\visctap0901.sys [34440 2015-08-24] (The OpenVPN Project)
R0 vsock; C:\WINDOWS\System32\drivers\vsock.sys [75512 2015-11-05] (VMware, Inc.)
S3 VSScanner; C:\WINDOWS\System32\DRIVERS\vsscanner.sys [29808 2016-08-18] (VoodooSoft, LLC)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [34520 2015-07-09] (VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46584 2018-07-31] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [340008 2018-07-31] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61992 2018-07-31] (Microsoft Corporation)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2018-08-03] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-03-27] (Zemana Ltd.)
U3 idsvc; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-08-18 10:48 - 2018-08-18 11:13 - 000034452 _____ C:\Users\Eric\Desktop\FRST.txt
2018-08-18 10:28 - 2018-08-18 10:28 - 000000552 _____ C:\Users\Eric\Desktop\JRT.txt
2018-08-18 01:20 - 2018-08-18 01:20 - 000077614 _____ C:\Users\Eric\Desktop\cbs.zip
2018-08-18 01:20 - 2018-08-18 01:07 - 001091969 _____ C:\Users\Eric\Desktop\cbs.txt
2018-08-17 23:56 - 2018-08-17 23:57 - 002412544 _____ (Farbar) C:\Users\Eric\Desktop\FRST64.exe
2018-08-15 23:16 - 2018-08-15 23:16 - 000000000 ____D C:\Users\Test\AppData\Local\D3DSCache
2018-08-15 23:15 - 2018-08-15 23:15 - 000003268 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2018-08-15 23:15 - 2018-08-15 23:15 - 000000000 ___RD C:\Users\Test\OneDrive
2018-08-15 23:14 - 2018-08-15 23:14 - 000000000 ____D C:\Users\Test\AppData\Roaming\QFX Software
2018-08-15 23:14 - 2018-08-15 23:14 - 000000000 ____D C:\Users\Test\AppData\Roaming\HDDHealth
2018-08-15 23:14 - 2018-08-15 23:14 - 000000000 ____D C:\Users\Test\AppData\Roaming\ASUS
2018-08-15 23:14 - 2018-08-15 23:14 - 000000000 ____D C:\Users\Test\AppData\Local\Zemana
2018-08-15 23:14 - 2018-08-15 23:14 - 000000000 ____D C:\Users\Test\AppData\Local\Publishers
2018-08-15 23:14 - 2018-08-15 23:14 - 000000000 ____D C:\Users\Test\AppData\Local\DBG
2018-08-15 23:13 - 2018-08-15 23:15 - 000002443 _____ C:\Users\Test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-08-15 23:13 - 2018-08-15 23:15 - 000000000 ____D C:\Users\Test\AppData\Local\Packages
2018-08-15 23:13 - 2018-08-15 23:15 - 000000000 ____D C:\Users\Test
2018-08-15 23:13 - 2018-08-15 23:14 - 000000000 ____D C:\Users\Test\AppData\Local\VirtualStore
2018-08-15 23:13 - 2018-08-15 23:13 - 000000020 ___SH C:\Users\Test\ntuser.ini
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\Voisinage réseau
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\Voisinage d'impression
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\Modèles
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\Mes documents
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\Menu Démarrer
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\Documents\Mes vidéos
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\Documents\Mes images
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\Documents\Ma musique
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 _SHDL C:\Users\Test\AppData\Local\Historique
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 ___RD C:\Users\Test\3D Objects
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 ____D C:\Users\Test\AppData\Roaming\Adobe
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 ____D C:\Users\Test\AppData\Local\Google
2018-08-15 23:13 - 2018-08-15 23:13 - 000000000 ____D C:\Users\Test\AppData\Local\ConnectedDevicesPlatform
2018-08-15 23:13 - 2016-12-10 11:43 - 000000000 ____D C:\Users\Test\Documents\Visual Studio 2010
2018-08-15 23:13 - 2016-12-10 11:43 - 000000000 ____D C:\Users\Test\AppData\Roaming\Media Center Programs
2018-08-15 23:13 - 2016-12-10 11:43 - 000000000 ____D C:\Users\Test\AppData\Roaming\Macromedia
2018-08-14 21:48 - 2018-08-14 23:31 - 000000000 ___HD C:\$WINDOWS.~BT
2018-08-06 15:09 - 2018-08-06 15:12 - 000000076 _____ C:\Users\Eric\Desktop\commandes.txt
2018-08-06 09:12 - 2018-08-18 10:37 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-08-04 13:12 - 2018-08-04 13:12 - 000000000 ____D C:\Users\Eric\Documents\Symantec EDR
2018-08-04 13:11 - 2018-08-04 13:14 - 000000000 ____D C:\Users\Eric\AppData\Local\Akamai
2018-08-04 08:36 - 2018-08-04 08:36 - 000000218 _____ C:\Users\Eric\AppData\Local\recently-used.xbel
2018-08-04 07:50 - 2018-08-04 07:50 - 007460520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Eric\Downloads\avg_antivirus_free_setup.exe
2018-08-04 07:50 - 2018-08-04 07:50 - 000000000 ____D C:\ProgramData\AVG
2018-08-04 07:29 - 2018-08-04 07:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2018-08-04 07:29 - 2018-08-04 07:29 - 000000000 ____D C:\ProgramData\ESET
2018-08-04 07:29 - 2018-08-04 07:29 - 000000000 ____D C:\Program Files\ESET
2018-08-03 23:53 - 2018-08-03 23:53 - 002884096 _____ (niemiro) C:\Users\Eric\Desktop\SFCFix.exe
2018-08-03 19:50 - 2018-08-18 01:01 - 000000000 ____D C:\SFCFix
2018-08-03 19:03 - 2018-08-18 01:01 - 000000000 ____D C:\Users\Eric\AppData\Local\niemiro
2018-08-03 17:05 - 2018-08-03 17:05 - 000018047 _____ C:\Users\Eric\AppData\Local\Temp56.html
2018-08-03 16:44 - 2018-08-03 16:44 - 027088440 _____ (Adlice Software) C:\Users\Eric\Desktop\RogueKiller_portable64 (1).exe
2018-08-03 16:25 - 2018-08-03 16:25 - 007417040 _____ (Malwarebytes) C:\Users\Eric\Desktop\adwcleaner_7.2.2.exe
2018-08-03 14:28 - 2018-08-03 14:28 - 000000000 ___HD C:\$SysReset
2018-08-03 12:26 - 2018-08-03 12:26 - 000203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam64.sys
2018-08-03 12:26 - 2018-08-03 12:26 - 000001221 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk
2018-08-03 12:26 - 2018-08-03 12:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2018-08-03 12:26 - 2018-08-03 12:26 - 000000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2018-08-02 11:00 - 2018-08-03 14:48 - 000000000 _____ C:\Recovery.txt
2018-08-02 09:13 - 2018-08-02 09:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium
2018-08-02 08:06 - 2018-08-02 08:06 - 000000080 ___SH C:\bootTel.dat
2018-08-02 08:06 - 2018-08-02 08:06 - 000000000 __SHD C:\found.000
2018-08-02 00:31 - 2018-08-02 00:31 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\175562E0.sys
2018-08-02 00:30 - 2018-08-02 00:35 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-08-02 00:30 - 2018-08-02 00:30 - 000192952 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2018-08-02 00:24 - 2018-08-02 00:24 - 000001861 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2018-08-02 00:24 - 2018-08-02 00:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2018-08-02 00:24 - 2018-08-02 00:24 - 000000000 ____D C:\Program Files\HitmanPro
2018-08-02 00:23 - 2018-08-18 10:35 - 000000000 ____D C:\ProgramData\HitmanPro.Alert
2018-08-02 00:23 - 2018-08-02 00:23 - 001265800 _____ (SurfRight B.V.) C:\WINDOWS\system32\hmpalert.dll
2018-08-02 00:23 - 2018-08-02 00:23 - 000878216 _____ (SurfRight B.V.) C:\WINDOWS\SysWOW64\hmpalert.dll
2018-08-02 00:23 - 2018-08-02 00:23 - 000303984 _____ (SurfRight B.V.) C:\WINDOWS\system32\Drivers\hmpalert.sys
2018-08-02 00:23 - 2018-08-02 00:23 - 000093800 _____ (SurfRight B.V.) C:\WINDOWS\system32\Drivers\hmpnet.sys
2018-08-02 00:23 - 2018-08-02 00:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2018-08-02 00:23 - 2018-08-02 00:23 - 000000000 ____D C:\ProgramData\HitmanPro
2018-08-02 00:23 - 2018-08-02 00:23 - 000000000 ____D C:\Program Files (x86)\HitmanPro.Alert
2018-08-01 14:54 - 2018-08-01 14:54 - 005030384 _____ (Blizzard Entertainment) C:\Users\Eric\Downloads\StarCraft-II-Setup (1).exe
2018-08-01 14:01 - 2018-08-01 14:01 - 000012605 _____ C:\Users\Eric\Downloads\dans-la-brume-french-hdlight-1080p-2018.torrent
2018-08-01 13:57 - 2018-08-01 13:57 - 000024233 _____ C:\Users\Eric\Downloads\les-aventures-de-spirou-et-fantasio-french-bluray-720p-2018.torrent
2018-07-29 11:43 - 2018-07-29 11:43 - 003261824 _____ C:\Users\Eric\Desktop\ZHPCleaner (1).exe
2018-07-29 09:56 - 2018-07-29 09:56 - 000030370 _____ C:\ProgramData\agent.uninstall.1532850976.bdinstall.bin
2018-07-29 09:44 - 2018-08-18 11:06 - 000000000 ____D C:\ProgramData\Minidumps
2018-07-29 09:44 - 2018-07-29 12:35 - 000000000 ____D C:\ProgramData\heilig defense, llc
2018-07-29 09:39 - 2018-07-29 09:39 - 000000000 ____D C:\Program Files\Heilig Defense
2018-07-25 15:40 - 2018-07-25 15:40 - 000073864 _____ C:\Users\Eric\AppData\Local\GDIPFONTCACHEV1.DAT
2018-07-25 13:11 - 2018-07-25 13:11 - 000025208 _____ C:\ProgramData\hva.1532517060.bdinstall.bin
2018-07-25 13:10 - 2018-07-25 13:10 - 000048841 _____ C:\ProgramData\agent.1532517032.bdinstall.bin
2018-07-25 13:10 - 2018-07-25 13:10 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2018-07-21 16:48 - 2018-07-21 16:48 - 000260680 _____ C:\Users\Eric\Documents\img021.pdf

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-08-18 11:13 - 2017-03-27 11:55 - 000096094 _____ C:\WINDOWS\ZAM.krnl.trace
2018-08-18 11:13 - 2017-03-27 11:55 - 000059595 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2018-08-18 11:11 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-08-18 10:52 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-08-18 10:48 - 2017-12-14 20:59 - 000000000 ____D C:\FRST
2018-08-18 10:44 - 2018-07-12 12:51 - 000003120 _____ C:\WINDOWS\System32\Tasks\MSIAfterburner
2018-08-18 10:40 - 2018-05-27 12:47 - 000000000 ____D C:\Users\Eric
2018-08-18 10:36 - 2018-07-15 16:48 - 000026512 _____ (NoVirusThanks Company Srl) C:\WINDOWS\system32\Drivers\OSArmorDevDrv.sys
2018-08-18 10:36 - 2018-07-15 16:48 - 000025440 _____ (NoVirusThanks Company Srl) C:\WINDOWS\system32\Drivers\osadevprotect.sys
2018-08-18 10:36 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Registration
2018-08-18 10:35 - 2018-05-27 13:47 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-08-18 10:35 - 2017-07-18 19:37 - 000000000 ____D C:\ProgramData\NVIDIA
2018-08-18 10:35 - 2014-10-19 02:43 - 000000000 ____D C:\ProgramData\VMware
2018-08-18 10:33 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-08-18 10:04 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-08-18 01:22 - 2018-05-27 13:47 - 000004156 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0E26638C-F402-4335-A711-4529013FCBE8}
2018-08-18 01:03 - 2017-12-06 13:53 - 000000000 ____D C:\Users\Eric\AppData\Local\CloudStationBackup
2018-08-18 00:57 - 2018-07-16 15:49 - 000380848 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-08-18 00:54 - 2018-04-12 01:34 - 000396184 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2018-08-18 00:54 - 2018-04-12 01:34 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2018-08-18 00:54 - 2018-04-12 01:34 - 000046592 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2018-08-18 00:54 - 2018-04-12 01:34 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2018-08-18 00:54 - 2018-04-12 01:34 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2018-08-17 11:01 - 2017-10-06 11:06 - 000000772 _____ C:\Users\Eric\Desktop\ZHPCleaner.lnk
2018-08-17 11:00 - 2018-03-18 13:16 - 003268480 _____ C:\Users\Eric\ZHPCleaner.exe
2018-08-17 10:56 - 2016-12-17 13:20 - 000000000 ____D C:\Users\Eric\AppData\Roaming\ZHP
2018-08-17 10:47 - 2017-04-30 23:17 - 000000000 ____D C:\Users\Eric\AppData\Local\MyComGames
2018-08-17 10:24 - 2014-10-19 02:48 - 000000000 ____D C:\Users\Eric\AppData\Roaming\VMware
2018-08-17 10:24 - 2014-10-19 02:48 - 000000000 ____D C:\Users\Eric\AppData\Local\VMware
2018-08-17 10:21 - 2018-04-12 01:34 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2018-08-17 10:03 - 2018-05-27 12:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-08-17 09:48 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-08-15 23:13 - 2016-04-27 07:53 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-08-15 10:17 - 2017-01-11 11:35 - 000000000 ____D C:\Users\Eric\AppData\LocalLow\Mozilla
2018-08-15 10:12 - 2014-03-30 13:18 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-08-15 10:07 - 2014-03-30 13:18 - 137343192 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-08-14 23:31 - 2018-05-27 13:44 - 000001908 _____ C:\WINDOWS\diagwrn.xml
2018-08-14 23:31 - 2018-05-27 13:44 - 000001908 _____ C:\WINDOWS\diagerr.xml
2018-08-14 23:16 - 2018-05-19 09:37 - 000000000 ___DC C:\WINDOWS\Panther
2018-08-14 23:09 - 2018-04-11 23:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-08-13 11:28 - 2014-10-24 00:57 - 000000000 ____D C:\Users\Eric\AppData\Roaming\foobar2000
2018-08-13 09:35 - 2017-08-21 12:40 - 000000000 ____D C:\Users\Eric\AppData\Local\FSDART
2018-08-09 22:40 - 2015-11-07 22:17 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-08-09 22:40 - 2015-11-07 22:17 - 000002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-08-06 17:41 - 2018-04-12 01:34 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2018-08-06 17:19 - 2018-04-12 01:41 - 000836480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-08-06 17:19 - 2018-04-12 01:41 - 000181120 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-08-06 17:15 - 2018-04-12 01:34 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
2018-08-06 15:15 - 2018-07-09 10:23 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2018-08-06 15:15 - 2018-07-09 10:23 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe
2018-08-06 14:43 - 2018-04-12 01:34 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsparse.dll
2018-08-05 23:05 - 2018-07-09 10:23 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2018-08-05 20:46 - 2018-05-27 13:13 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-08-05 14:28 - 2018-04-12 01:35 - 003755520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2018-08-05 14:28 - 2018-04-12 01:35 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootim.exe
2018-08-04 23:19 - 2018-04-12 01:34 - 000042480 _____ (Microsoft Corporation) C:\WINDOWS\system32\msgsm32.acm
2018-08-04 23:19 - 2018-04-12 01:34 - 000036264 _____ (Microsoft Corporation) C:\WINDOWS\system32\imaadp32.acm
2018-08-04 23:19 - 2018-04-12 01:34 - 000034696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msadp32.acm
2018-08-04 23:19 - 2018-04-12 01:34 - 000025408 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg711.acm
2018-08-04 23:07 - 2018-07-09 10:24 - 002193920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll
2018-08-04 23:07 - 2018-07-09 10:24 - 001186816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll
2018-08-04 23:07 - 2018-07-09 10:23 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe
2018-08-04 23:07 - 2018-07-09 10:23 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll
2018-08-04 23:07 - 2018-07-09 10:23 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CscUnpinTool.exe
2018-08-04 23:07 - 2018-07-09 10:23 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppCore.dll
2018-08-04 23:07 - 2018-07-09 10:23 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe
2018-08-04 23:07 - 2018-04-12 01:35 - 000287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ManagedEventLogging.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ConfigWrapper.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CmUtil.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.SyncController.exe
2018-08-04 23:07 - 2018-04-12 01:35 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CabUtil.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.EventLogMessages.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAgentPolicyGenerator.exe
2018-08-04 23:07 - 2018-04-12 01:35 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Management.WmiAccess.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Management.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppData.WinRT.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.SyncCommon.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.WinRT.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.LocalSyncProvider.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernSync.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevTemplateBaselineGenerator.exe
2018-08-04 23:07 - 2018-04-12 01:35 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevTemplateConfigItemGenerator.exe
2018-08-04 23:07 - 2018-04-12 01:35 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.SmbSyncProvider.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.MonitorSyncProvider.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.SyncConditions.dll
2018-08-04 23:07 - 2018-04-12 01:35 - 000000146 _____ C:\WINDOWS\system32\UevAppMonitor.exe.config
2018-08-04 22:36 - 2018-07-09 10:24 - 001308672 _____ C:\WINDOWS\system32\FaceProcessor.dll
2018-08-04 22:36 - 2018-07-09 10:23 - 000542888 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2018-08-04 22:25 - 2018-07-09 10:23 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2018-08-04 22:25 - 2018-04-12 01:33 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\devauthe.sys
2018-08-04 21:23 - 2018-04-12 01:33 - 000514464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2018-08-04 21:23 - 2018-04-12 01:33 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2018-08-04 21:23 - 2018-04-12 01:33 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
2018-08-04 20:19 - 2014-10-19 02:48 - 000000000 ____D C:\Users\Eric\Documents\Virtual Machines
2018-08-04 16:42 - 2018-06-13 10:31 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-08-04 13:21 - 2017-06-28 12:54 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2018-08-04 13:21 - 2017-02-01 11:47 - 000000000 ____D C:\Users\TEMP
2018-08-04 13:21 - 2015-10-30 08:28 - 000000000 ____D C:\Users\Default.migrated
2018-08-04 12:58 - 2017-11-10 12:23 - 000000000 ____D C:\Users\Eric\AppData\Local\exodus
2018-08-04 12:56 - 2017-11-10 13:35 - 000000000 ____D C:\Users\Eric\AppData\Roaming\Electrum
2018-08-04 12:24 - 2018-07-05 09:20 - 000000000 ____D C:\Users\Eric\AppData\Local\D3DSCache
2018-08-04 12:24 - 2014-03-31 21:15 - 000000000 ____D C:\Users\Eric\AppData\Local\Ubisoft Game Launcher
2018-08-04 10:48 - 2017-07-07 13:21 - 000000000 ____D C:\Users\Eric\Downloads\NewbieContest
2018-08-04 10:45 - 2015-03-18 23:18 - 000000000 ____D C:\Users\Eric\Downloads\A+ VCE Classic 5.0.4 Outcast
2018-08-04 10:26 - 2015-09-21 12:28 - 000000000 ____D C:\Program Files (x86)\ImmobilierLoyer
2018-08-04 10:18 - 2014-04-02 12:23 - 000000000 ____D C:\Users\Eric\AppData\Local\Blizzard Entertainment
2018-08-04 10:15 - 2017-12-01 16:22 - 000000000 ____D C:\ProgramData\Blizzard Entertainment
2018-08-04 07:30 - 2018-04-12 01:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2018-08-04 07:30 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2018-08-04 07:19 - 2018-04-12 01:33 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\parport.sys
2018-08-04 07:19 - 2018-04-12 01:33 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys
2018-08-04 07:19 - 2018-04-12 01:33 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serenum.sys
2018-08-04 00:00 - 2018-04-12 01:33 - 000259480 _____ (AMD Technologies Inc.) C:\WINDOWS\system32\Drivers\amdsbs.sys
2018-08-03 18:48 - 2017-11-24 16:24 - 000000000 ____D C:\Users\Eric\AppData\Local\Packages
2018-08-03 17:48 - 2017-07-10 19:01 - 000000000 ____D C:\Users\Eric\AppData\Roaming\DAEMON Tools Lite
2018-08-03 17:48 - 2015-06-21 19:36 - 000000000 ____D C:\Program Files (x86)\Ikaruga
2018-08-03 17:05 - 2017-10-08 15:29 - 000001293 _____ C:\Users\Eric\AppData\Local\Temp1.html
2018-08-03 16:45 - 2014-07-21 15:40 - 000028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2018-08-03 12:25 - 2017-03-27 11:54 - 000000000 ____D C:\Users\Eric\AppData\Local\Zemana
2018-08-02 16:10 - 2016-06-29 12:28 - 000000000 ____D C:\Users\Eric\Documents\Reflect
2018-08-02 09:13 - 2017-09-21 11:08 - 000002006 _____ C:\Users\Public\Desktop\Reflect.lnk
2018-08-02 09:13 - 2017-09-21 11:08 - 000000000 ____D C:\Program Files\Macrium
2018-08-02 00:32 - 2018-06-18 17:26 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-08-02 00:14 - 2014-04-07 12:50 - 000000000 ____D C:\Users\Eric\AppData\Local\ElevatedDiagnostics
2018-08-01 21:52 - 2018-01-25 21:38 - 000000000 ____D C:\Users\Eric\AppData\Roaming\WhatsApp
2018-08-01 21:51 - 2018-01-25 21:38 - 000002140 _____ C:\Users\Eric\Desktop\WhatsApp.lnk
2018-08-01 21:51 - 2018-01-25 21:38 - 000000000 ____D C:\Users\Eric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2018-08-01 21:50 - 2018-01-25 21:43 - 000000000 ____D C:\Users\Eric\AppData\Local\WhatsApp
2018-08-01 21:38 - 2017-02-01 12:27 - 000000000 ____D C:\ProgramData\VoodooShield
2018-08-01 21:38 - 2017-01-29 15:35 - 000000000 ____D C:\Users\Eric\AppData\Local\PrivaZer
2018-08-01 14:10 - 2016-01-14 21:33 - 000000000 ____D C:\Users\Eric\AppData\Roaming\BitTorrent
2018-07-31 16:54 - 2016-07-21 19:56 - 000000000 ____D C:\Users\Eric\AppData\Roaming\texstudio
2018-07-31 10:01 - 2018-07-10 15:54 - 000000000 ____D C:\ProgramData\Packages
2018-07-31 09:59 - 2018-04-13 14:37 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-07-28 10:00 - 2017-02-12 12:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-07-28 10:00 - 2014-03-30 19:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-07-27 17:59 - 2016-09-10 00:04 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-07-25 11:50 - 2018-07-02 14:49 - 000000000 ____D C:\WINDOWS\Minidump
2018-07-22 23:29 - 2018-07-07 11:43 - 000000000 ____D C:\Users\Eric\AppData\Roaming\CodeBlocks
2018-07-22 20:20 - 2018-04-17 19:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2018-07-19 15:07 - 2016-10-03 13:08 - 000000000 ____D C:\Users\Eric\Downloads\RootMe

==================== Fichiers à la racine de certains dossiers =======

2014-04-07 13:06 - 2014-04-07 13:14 - 000000134 _____ () C:\Users\Eric\DeletePrintJobs.cmd
2018-03-18 13:16 - 2018-08-17 11:00 - 003268480 _____ () C:\Users\Eric\ZHPCleaner.exe
2017-11-05 17:49 - 2017-11-05 17:49 - 000937776 _____ (AutoIt Team) C:\Users\Eric\AppData\Roaming\dJYL.exe
2017-07-19 19:20 - 2017-08-25 13:52 - 000000818 _____ () C:\Users\Eric\AppData\Roaming\jd-gui.cfg
2016-02-16 15:45 - 2016-08-27 18:44 - 000000126 _____ () C:\Users\Eric\AppData\Roaming\programs.vc
2016-08-27 17:49 - 2016-08-27 17:49 - 000000033 _____ () C:\Users\Eric\AppData\Roaming\resetid.vc
2014-10-25 20:33 - 2016-06-20 15:43 - 128761973 _____ () C:\Users\Eric\AppData\Roaming\SecureCRT.dmp
2016-02-20 13:31 - 2018-06-04 18:33 - 000000600 _____ () C:\Users\Eric\AppData\Roaming\winscp.rnd
2016-02-06 01:47 - 2016-02-06 01:47 - 000000331 ____H () C:\Users\Eric\AppData\Local\CacheConfig.dat
2018-07-16 09:57 - 2018-07-16 09:57 - 000000036 _____ () C:\Users\Eric\AppData\Local\housecall.guid.cache
2014-05-02 15:03 - 2018-06-10 14:03 - 000000600 _____ () C:\Users\Eric\AppData\Local\PUTTY.RND
2018-08-04 08:36 - 2018-08-04 08:36 - 000000218 _____ () C:\Users\Eric\AppData\Local\recently-used.xbel
2014-04-03 19:38 - 2016-07-23 10:35 - 000007612 _____ () C:\Users\Eric\AppData\Local\Resmon.ResmonCfg
2017-10-08 15:29 - 2018-08-03 17:05 - 000001293 _____ () C:\Users\Eric\AppData\Local\Temp1.html
2018-08-03 17:05 - 2018-08-03 17:05 - 000018047 _____ () C:\Users\Eric\AppData\Local\Temp56.html

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2018-05-27 12:35

==================== Fin de FRST.txt ============================